DMV

1
DMV

• Biometrics (SB 640)
• Federal Real ID Act

2
SB 640

• Approved by the Oregon Legislature in 2005
• Purpose - To address the growing problem of
  identity theft fraud in Oregon by requiring the
  collection verification of biometric data prior
  to issuance.
• Supported by the Regional Economic Crime
  Investigation Center (RECIC) composed of local,
  state, federal law enforcement agencies and the
  private sector.

3
SB 640

• KEY COMPONENTS
• Collection of digital photos to allow facial
  recognition
• Verification of identity before issuance
• One-to-one comparison of photos at the counter
• One-to-many comparison of photos overnight in
  batch
• Interim cards issued at field offices valid up to
  60 days
• Laminated cards with security features are mailed
  to customers from secure production facility
  within 5-7 days
• Biometric data only available to employees acting
  in official capacity and to law enforcement

4
SB 640

• KEY COMPONENTS (Continued)
• Requires verification of operators identity
  prior to authorizing issuance
• Allows extension of current digital photo
  licensing contract with existing vendor
  (Digimarc)
• Allows fee increase of up to 3.00 to cover
  implementation and operating costs
• Fully operative on July 1, 2008

5
SB 640

• CENTRAL ISSUANCE -- Advantages
• Allows additional time to verify identity
• Card issuance delayed if fraud suspected
• Law enforcement contacted for suspected fraud
• Secure issuance process
• Cards produced issued from secure facility
• Controlled environment
• Card stock inventory controls
• Improves address reliability

6
SB 640

• CENTRAL ISSUANCE -- Considerations
• Delayed issuance of DL/ID cards to customers
• Some cards will be undeliverable by mail
• Increased cost to customer up to 3.00
• Additional personnel required for facial
  recognition process and suspected fraud cases
• Interim card may not be accepted by banks,
  merchants, etc. for identity purposes
• Encrypted data line to card production facility

7
REAL ID Act - Federal

• Signed by President Bush on May 11, 2005 to
  strengthen the DL ID card issuance process
• Requires minimum standards for federal use of
  driver license or identification card, including
• Information printed on cards full legal name,
  DOB, photograph, etc.
• Physical security features on cards to prevent
  tampering, counterfeiting, or duplication for
  fraudulent purposes
• Federal Department of Homeland Security must
  issue regulations defining the minimum standards

8
FEDERAL - REAL ID Act

• Minimum standards (continued)
• A common machine-readable card technology
• Evidence of lawful status in the U.S. (legal
  presence)
• Verification of identity documents with issuing
  agency SSN, immigration, passports, birth
  certificates, military
• Technology to capture digital images of identity
  source documents (retain for 10 yrs)

9
FEDERAL - REAL ID Act

• Minimum standards (continued)
• DMV employee training on fraudulent document
  recognition
• Electronic access to Oregon motor vehicle records
  by other states
• Note Cards issued by States that do not comply
  with the Act by May 11, 2008, may not be
  recognized by federal agencies for official
  purposes, e.g., airport security. Federal DHS
  may grant extensions.

10
WHATS DRIVING THE NEED FOR THESE CHANGES?

• 9/11 The Threat of Terrorism
• Tighter National Identity Standards -
  Verification of Identity Documents
• National Standards for Driver Licensing
• Identity Theft Concerns
• Check, Credit Card Bank Fraud
• Sharing of Driver Records Between States
• Eligibility standards for public services

11
HOW CITIZENS ARE AFFECTED?

• Tighter issuance standards requirements will
  increase wait times at DMV
• Increased security measures will reduce risk of
  identity theft
• Driver license or ID card will not be received
  immediately
• Some people will not be eligible for driver
  license or ID cards

12
WHAT ARE THE BENEFITS?

• Deters identity theft
• Promotes consistency between states minimum
  licensing standards
• Enhances identity verification processes You
  are who you say you are
• Strengthens concept of One Identity One
  License One Driver Control Record
• Holds drivers accountable by more accurately
  tracking driver records between states

13
DMV Data

• DMV data access is very restricted today
• Access granted through interagency and private
  agreements as allowed by law
• Privacy protections in State and Federal laws
• Data protection and Security a top priority
• Social Security Administration (SSA) may require
  encryption once SSN data is validated
• Additional security features are being considered
  and evaluated

14
Real ID SB 640 - SUMMARY

• Real ID SB 640
• Verify Identity Documents
• SSN (SSOLV) X
• Alien Registration Number (SAVE) X
  
• Birth Certificate X
• All Other Documents X
• Capture Store Identity Documents X
• Legal Presence Requirement X
• Fraudulent Doc Recognition Training X
• Access to Driver Records by Other States X
• Facial Recognition Technology
  X
• Central Issuance X

15
IS Implications - Real ID SB 640

• Electronic Verification (Real ID)
• Requires electronic protocols for verification of
  source documents (SSN, birth certificates,
  passports, immigration documents, military ids)
• Document Imaging (Real ID)
• Requires collection and electronic storage of
  source document images for up to 10 years
• Biometric data (SB 640)
• Requires collection of digital photos and
  measurements of physical characteristics for 11
  and 1N comparisons.

16
Biometrics Facial Recognition Workflow

• Begin with digital image
• Eye locations are determined
• Image is converted to grey scale and cropped
• The image is converted to a template used by the
  search engine for facial comparison results
• Searching and matching using a sophisticated
  algorithm to compare the template to other
  templateson file

17
11 Facial Matching

• Verifies the person applying for a renewal
  license is the person whose previous portrait is
  in the database
• Compares facial images
• Compare picture from renewal process image stored
  in the database
• Usually occurs immediately after image capture

11 Facial Matching helps ensure a renewed
license is issued to the original applicant.
18
Biometrics 1Many Facial Recognition

• Search a large database of images quickly to
  obtain a small number of candidate matches
• Compares the applicants face template with all
  the templates in the image database and returns
  top candidates for a match
• Typically run offline in a batch mode to better
  identify same-day multiple issuance fraud cases
• Jurisdictions can block DL/ID issuance if fraud
  is suspected

Can determine if an applicant has multiple
enrollments, perhaps under multiple identities,
in the database
19
Portrait Capture Software

• Find-a-face software
• Fully automatic feature
• Ultimate portrait consistency
• Locates applicant face and crops to standard
  size
• Automatic color correction
• Ensures uniform portrait brightness for varying
  complexions

AAMVA STANDARD
20
Image Consistency

• Portrait image analysis software
• Automatically finds applicants eyes
• Analyses image suitability for facial recognition
• Parameters checked
• Head size
• Face centering
• Eyes open and visible
• Face present
• Sufficient resolution
• Others
• Image thoroughly analyzed for compliance with ISO
  biometric data interchange standard for face
  images (ISO 19794-5)

21
IS Implications - Real ID

• Impacts to Legacy Systems
• Electronic verification of data found on
  documents presented for DL/ID issuance
• Electronic access to driver license data by other
  state motor vehicle agencies
• Expiration dates tied to approved length of stay
  in this country
• Prevent issuing driver license to an applicant
  until license in another state has been
  terminated
• Restrict access to secure data through encryption
  and/or data masking
• System auditing of access attempts to secured data

22
IS Implications - SB 640

• Impacts to Legacy Systems
• Replace all DL/ID card printers in DMV field
  offices
• Point to point encryption for electronic
  transmission of photos and secured data
• Verify identify of equipment operator who
  authorizes issuance of driver license or ID card
• Establish appropriate interfaces between
  proprietary vendor technology/systems and
  existing DMV applications

23
IT Challenges

• Implementation of concurrent legal mandates with
  existing staff
• REAL ID Act
• SB 640
• CDLIS/PDPS Rel 3.
• 2007 State Legislation
• Fixed deadlines with evolving federal
  requirements
• Real ID May 2008
• SB 640 July 2008
• CDLIS / PDPS December 2008
• 2007 State Legislation January 2008
• Other implementation issues
• Real ID dependent on passage of HB 2207
• Limited funding to implement federal mandates
• Scarcity of skilled mainframe developers
• Limited IS staff with depth of knowledge in
  legacy business systems

24
Major DMV System

• Graphical Systems Overview

25
Systems Overview
26
DMV

• Questions/Comments?

27
Drivers Overview